Secure end-to-end transport through intermediary nodes

Abstract

A communication network encrypts a first portion of a transaction associated with point-to-point communications using a point-to-point encryption key. A second portion of the transaction associated with end-to-end communications is encrypted using an end-to-end encryption key.

We claim: 
     
       1. A system for processing a transaction, the system having one or more processors configured for:
 receiving a username and a password from a first computer; 
 authenticating the username and the password with a user database; 
 issuing a token for the first computer, wherein a first point-to-point security association is negotiated with the first computer and a second point-to-point security association is negotiated with a second computer; 
 receiving a transaction message from the second computer, the transaction message comprising control data and payload data, wherein:
 the control data provides authentication of a source of the transaction and includes the token; and 
 the token provides transaction routing information; and 
 
 transmitting the payload data to the first computer based on the token. 
 
     
     
       2. The system of  claim 1 , wherein the token is issued to the first computer after authenticating the username and the password. 
     
     
       3. The system of  claim 1 , wherein the second computer is a personal computer. 
     
     
       4. The system of  claim 1 , wherein the transaction message has a third security association and the payload data is encrypted payload data. 
     
     
       5. The system of  claim 1 , wherein the first computer is a first mobile device, and the first mobile device and the system are coupled over a mobile network. 
     
     
       6. The system of  claim 5 , wherein the mobile network provides an Internet protocol (IP) infrastructure of a wireless service provider. 
     
     
       7. The system of  claim 1 , wherein the transaction message is modified by the second computer based on the token. 
     
     
       8. The system of  claim 1 , wherein the payload data is decrypted and displayed on the first computer.